Data Security Engineer

Job Description

Data Security Engineer

Location: Hybrid (Onsite/Remote)
Type: Contract to hire
Pay: $110,000-$120,000/yr W2

W2 ONLY, NO C2C

Position Overview

We are seeking an experienced Enterprise Data & Platform Security Engineer to lead the design, implementation, and continuous improvement of enterprise data protection and platform security capabilities. This is an engineering-focused role responsible for strengthening data security, improving governance, reducing organizational risk, and building scalable security solutions across cloud, infrastructure, identity, and enterprise platforms.

The ideal candidate has a proactive engineering mindset and thrives on building security programs, automating processes, improving security posture, and driving long-term security strategy. This is not a monitoring or SOC analyst role.

Key Responsibilities

• Design and implement enterprise-scale data protection strategies across on-premises, cloud, SaaS, and hybrid environments.
• Develop security architectures supporting data classification, encryption, data loss prevention (DLP), tokenization, retention, and information protection.
• Lead implementation and optimization of Microsoft Purview capabilities, including data discovery, classification, labeling, governance, and DLP.
• Improve enterprise visibility into sensitive data and develop remediation strategies to reduce organizational risk.
• Design secure architecture patterns for:
  • Cloud platforms
  • Kubernetes and containerized environments
  • APIs
  • Identity platforms
  • Infrastructure-as-Code (IaC)
  • CI/CD pipelines
• Lead complex investigations involving data exposure, insider risk, and security control failures while driving long-term remediation efforts.
• Perform security assessments, threat analysis, architecture reviews, and vulnerability investigations across enterprise platforms.
• Develop security standards, governance frameworks, technical baselines, and operational playbooks.
• Create dashboards, metrics, and reporting to measure security posture, policy effectiveness, and risk reduction.
• Partner with engineering, infrastructure, identity, application, privacy, and business teams to improve enterprise security maturity.
• Mentor junior security engineers and provide technical leadership across multiple initiatives.
• Drive automation, continuous improvement, and modernization of enterprise security capabilities.

Required Qualifications

• 7+ years of Information Security, Security Engineering, Cloud Security, or Platform Security experience.
• Strong experience designing and implementing enterprise data protection strategies.
• Hands-on experience with Microsoft Purview , including:
  • Data Discovery
  • Data Classification
  • Data Labeling
  • Data Loss Prevention (DLP)
  • Information Protection
  • Data Governance
• Experience securing cloud, hybrid, and enterprise infrastructure environments.
• Strong understanding of:
  • Identity and Access Management (IAM)
  • Least Privilege
  • Zero Trust principles
  • Encryption
  • Data Governance
• Experience securing Kubernetes, containers, APIs, cloud services, and CI/CD pipelines.
• Experience with SIEM, endpoint security, DLP, and enterprise security monitoring platforms.
• Strong understanding of security architecture, cloud security, networking, operating systems, and common enterprise threat vectors.
• Experience investigating security incidents involving sensitive data and coordinating remediation efforts.
• Strong analytical, troubleshooting, documentation, and communication skills.
• Ability to prioritize multiple initiatives while working independently in a fast-paced environment.